Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TpadiGclWSCoZdZEqhcyzsVICgw.roa
File:                     TpadiGclWSCoZdZEqhcyzsVICgw.roa (raw, json)
Hash identifier:          mh5UMY2oRMBniiZgOVsJyvdwdlvPmNcm6JY2u0joF9M=
Subject key identifier:   4E:96:9D:88:67:25:59:20:A8:65:D6:44:AA:17:32:CE:C5:48:0A:0C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       154F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TpadiGclWSCoZdZEqhcyzsVICgw.roa
Signing time:             Tue 31 Mar 2026 07:59:23 +0000
ROA not before:           Tue 31 Mar 2026 07:59:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        110.158.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5455 (0x154f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:59:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4E969D8867255920A865D644AA1732CEC5480A0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:7f:7b:50:39:b7:f2:bf:9c:1a:b0:ee:7d:
                    ac:f0:90:1a:bd:40:82:b1:55:10:62:6a:3b:e4:ba:
                    62:7f:9a:5c:f5:08:2d:d9:16:11:5f:03:71:92:87:
                    f3:fa:31:f2:e2:b1:29:36:fb:86:b3:da:d2:e4:a8:
                    2a:60:75:44:31:2f:df:7b:37:cf:04:98:3d:93:8a:
                    6f:ee:19:5d:7e:14:2b:89:e6:3f:69:a5:c3:11:97:
                    6d:8e:a6:93:d1:68:08:62:d4:1b:4e:08:22:93:49:
                    9d:1a:fa:9b:94:a3:be:19:77:49:4b:f4:9c:52:ec:
                    50:8a:12:18:9a:67:b6:39:0b:72:67:a4:e3:c6:87:
                    f9:03:76:d8:78:c9:53:40:ce:ce:29:56:e4:20:c8:
                    9f:4a:d5:bb:31:37:fb:c1:31:24:36:60:70:12:38:
                    2d:9c:99:8b:b0:5c:b7:2b:28:24:e6:7c:82:fd:66:
                    94:46:3e:07:ca:88:15:36:2a:a5:05:61:f5:52:a5:
                    2f:0e:c6:3e:ee:0f:31:0c:7d:d4:25:65:42:ca:f2:
                    d0:fb:f5:fc:0c:e3:91:02:85:ae:1a:6a:fe:ac:3e:
                    4f:7c:c0:6b:4c:0a:27:f7:8b:f2:23:7e:36:66:93:
                    1d:91:a3:5b:b7:0f:d4:8b:30:73:4b:08:2e:1e:be:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:96:9D:88:67:25:59:20:A8:65:D6:44:AA:17:32:CE:C5:48:0A:0C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TpadiGclWSCoZdZEqhcyzsVICgw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:83:9a:87:e1:8b:b7:47:91:d2:a2:a3:08:36:92:61:f8:90:
         e8:5b:24:ba:d0:dd:8e:32:45:31:a4:f1:3a:10:d9:62:83:3d:
         7a:cb:7f:09:10:30:a0:23:c5:e2:4e:9c:1a:dd:35:55:73:f1:
         da:d8:82:83:b2:a5:bf:94:06:f0:43:bf:56:3f:43:c4:b0:73:
         d5:b8:4f:de:ca:05:56:76:b2:53:63:3a:58:43:38:2d:46:3b:
         4d:3b:fc:b1:55:f1:4f:57:13:cb:a3:0d:88:61:ff:56:c4:f1:
         20:1c:22:82:6a:d6:5d:61:1d:b3:88:36:9a:32:ca:9a:09:e1:
         2f:30:da:33:c8:e2:f4:eb:1d:8d:4d:bd:d6:85:2d:65:ce:94:
         a2:e6:7d:46:a7:bf:88:a0:fe:c9:01:b0:38:61:8e:4a:92:94:
         eb:33:ce:91:0b:4f:57:15:7d:c2:fd:15:96:a5:83:b9:3f:c7:
         30:c4:da:07:11:8e:49:03:a2:a7:42:b0:03:42:8b:15:f9:db:
         ca:4e:61:07:8d:d5:30:60:35:3c:d0:65:4f:5e:a1:b9:4f:d5:
         e5:c5:7a:c2:95:e7:4a:ad:c9:44:6b:78:9a:38:bd:9f:3c:58:
         98:4c:f4:3f:06:5a:fa:f7:44:da:93:3b:8a:9e:e2:3b:69:db:
         3f:f6:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:16 2026 by rpki-client